Skip to content

fix: add actions language to CodeQL scan #838

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Schmarvinius merged 5 commits into from
May 22, 2026
+16 −4
Merged

fix: add actions language to CodeQL scan #838

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
3a162ad
fix: avoid script injection in scan-with-blackduck action
Schmarvinius May 21, 2026
99873f6
fix: install @sap/cds-dk in deploy-release action
Schmarvinius May 21, 2026
406c6f2
fix: skip central publishing for coverage-report module
Schmarvinius May 21, 2026
e1c53b3
fix: add actions language to CodeQL scan
Schmarvinius May 22, 2026
1c57d57
Merge branch 'main' into fix/codeql-add-actions-language
Schmarvinius May 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 10 additions & 3 deletions .github/actions/scan-with-codeql/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,37 +8,44 @@ inputs:
maven-version:
description: The Maven version to use for the build.
required: true
language:
description: The CodeQL language to analyze (java-kotlin or actions).
required: true

runs:
using: composite
steps:
- name: Set up Java ${{ inputs.java-version }}
if: inputs.language == 'java-kotlin'
Comment thread
Schmarvinius marked this conversation as resolved.
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
with:
java-version: ${{ inputs.java-version }}
distribution: sapmachine
cache: maven

- name: Set up Maven ${{ inputs.maven-version }}
if: inputs.language == 'java-kotlin'
Comment thread
Schmarvinius marked this conversation as resolved.
uses: stCarolas/setup-maven@d6af6abeda15e98926a57b5aa970a96bb37f97d1 # v5
with:
maven-version: ${{ inputs.maven-version }}

- name: Initialize CodeQL
uses: github/codeql-action/init@ed410739ba306e4ebe5e123421a6bd694e494a2b # v4
with:
languages: java-kotlin
build-mode: manual
languages: ${{ inputs.language }}
build-mode: ${{ inputs.language == 'java-kotlin' && 'manual' || 'none' }}

- name: Install @sap/cds-dk
if: inputs.language == 'java-kotlin'
Comment thread
Schmarvinius marked this conversation as resolved.
run: npm i -g @sap/cds-dk@9.9.1
shell: bash

- name: Build Java code
if: inputs.language == 'java-kotlin'
Comment thread
Schmarvinius marked this conversation as resolved.
run: mvn clean compile -B -ntp -Dcds.install-node.skip
shell: bash

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@ed410739ba306e4ebe5e123421a6bd694e494a2b # v4
with:
category: "/language:java-kotlin"
category: "/language:${{ inputs.language }}"
7 changes: 6 additions & 1 deletion .github/workflows/pipeline.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -128,14 +128,18 @@ jobs:
github-token: ${{ secrets.GH_TOKEN }}

codeql:
name: CodeQL Analysis
name: CodeQL Analysis (${{ matrix.language }})
runs-on: ubuntu-latest
timeout-minutes: 30
permissions:
security-events: write
packages: read
actions: read
contents: read
strategy:
fail-fast: false
matrix:
language: [java-kotlin, actions]
steps:
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
Expand All @@ -145,3 +149,4 @@ jobs:
with:
java-version: 17
maven-version: ${{ env.MAVEN_VERSION }}
language: ${{ matrix.language }}
Loading